Collection - Windows

1. T1056: Input Capture

2. T1113: Screen Capture

3. T1125: Video Capture

4. T1119: Automated Collection

5. T1123: Audio Capture

6. T1005: Data from Local System

7. T1039: Data from Network Shared Drive

8. T1025: Data from Removable Media

9. T1074: Data Staged

10. T1213: Data from Information Repositories

11. T1114: Email Collection

12. T1056.001: Keylogging

13. T1115: Clipboard Data

14. T1120: Peripheral Device Discovery

15. T1124: System Time Discovery